yaplej
CCNA
Premium
join:2001-02-10
White City, OR
 ·Charter Pipeline
| [Config] NetFlow Ingress/Egress/Both? I just got a trial version of a NetFlow data collector, and want to configure NetFlow in our DS3 interface. Should I enable NetFlow for only one direction, or both? The DS3 interface goes out to our MPLS network.
What points should I setup NetFlow collection from, and what direction? I could do all WAN points in both directions, but that might be overkill.
Thanks. | |
|
 
TomS_
debugger it
Premium,MVM
join:2002-07-19
Australia
1 edit | Re: [Config] NetFlow Ingress/Egress/Both? NetFlow data is only collected on packets comming into an interface.
Therefore, if you want to measure traffic in both directions you need to enable NetFlow collection on your routers LAN and WAN interfaces.
It really depends on how accurate your statistics need to be.
Consider the attached diagram.
NetFlow enabled at each of the red dots will collect statistics for traffic coming from each LAN. In the case of the T1 link, it has been enabled on router access2 to preserve bandwidth on the T1.
NetFlow enabled at each of the purple dots will collect statistics for traffic comming into your network.
This way you can account for all traffic between internal hosts, and to/from the Internet. | |
|
carp
join:2002-10-30
clubs: | Turn Netflow on the DS3 and the LAN interface(s) that traffic will flow through. That would let you see in and out.
ip route-cache flow
should be all you need on each interface. Which collector are you trying out? | |
|
yaplej
CCNA
Premium
join:2001-02-10
White City, OR | Im trying SolarWinds Orion NetFlow Traffic Analyzer. Currently it only supports NetFlow v5 though. They plan on adding v9 sometime in 2008. | |
|
|
|
|
